Bug 17905: FIX CSRF in member-flags